Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
File:                     NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json)
Hash identifier:          NbQ0sFljBDW/+QZ7M26HPK06CduYuhdBFwH7D7nNwm4=
Subject key identifier:   AD:42:E6:56:96:DA:E7:43:D7:91:A8:2E:C1:6B:3A:49:F2:9C:21:1C
Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
Certificate issuer:       /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
Manifest number:          FD
Signing time:             Sat 23 Nov 2024 03:18:53 +0000
Manifest this update:     Sat 23 Nov 2024 03:18:52 +0000
Manifest next update:     Sat 30 Nov 2024 03:18:52 +0000
Files and hashes:         1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: eNCM1lUwimX9Q45yfjlLrf10Nob2jcXgADyAbLO01PY=)
                          2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: ABFFM1PxoSUJD+uYz/pY10lv6OnyO7PHPufaHPjtOBE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
                          rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
        Validity
            Not Before: Nov 23 03:18:52 2024 GMT
            Not After : Nov 30 03:18:52 2024 GMT
        Subject: CN=6741499d-e3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:f9:bf:2f:48:80:48:cf:b0:98:5f:02:76:
                    82:70:57:6f:a8:fe:7e:f7:7d:b6:9f:1d:f8:ea:93:
                    92:fd:c4:1c:39:14:bc:c6:97:67:5e:25:6c:db:b2:
                    b4:a0:b5:90:58:63:33:0e:38:7d:88:e3:86:b8:ba:
                    17:a2:a9:47:b3:59:6f:d0:cb:76:24:c7:1c:7d:ca:
                    32:2e:41:8d:a4:94:2b:7a:5d:9d:d0:b5:42:da:23:
                    ef:ba:ea:4c:13:6c:09:37:a2:7a:09:ec:15:71:76:
                    85:c8:a8:c7:5c:89:35:82:fb:f5:6d:2a:7d:7c:9d:
                    40:94:41:54:45:7f:da:0d:ad:e3:45:ed:4c:b7:7c:
                    c9:0b:38:a5:67:06:3b:b5:34:00:8a:0e:b9:aa:67:
                    f4:cc:68:9c:c6:ca:9d:fa:a1:03:b7:15:7a:37:83:
                    44:1b:2c:98:0d:3f:3a:31:3c:b9:7b:8c:bb:c1:26:
                    b6:1c:c2:0b:a5:ba:5e:06:07:90:58:61:64:32:9b:
                    70:d7:f3:46:7b:87:52:65:5c:ff:d5:9f:f3:b2:d3:
                    77:c0:d7:31:2d:4e:fe:02:32:45:5f:49:ba:33:17:
                    fe:14:3c:40:54:1d:df:af:96:2a:14:17:49:36:a8:
                    9c:47:28:08:16:ee:8a:07:0a:23:d7:ac:3b:88:2c:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:42:E6:56:96:DA:E7:43:D7:91:A8:2E:C1:6B:3A:49:F2:9C:21:1C
            X509v3 Authority Key Identifier:
                keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:24:32:03:dd:09:8a:45:8d:73:1d:68:16:0f:42:0b:d7:1f:
         de:22:7a:36:ef:a4:96:ea:e6:a3:a3:f9:4d:79:59:8e:61:f2:
         46:c3:91:8e:a9:39:0a:ab:c6:0d:9c:93:dd:77:32:a6:33:90:
         52:a7:5b:f8:83:b0:64:fd:c5:58:88:26:aa:cb:07:af:ca:af:
         13:c6:1a:43:bf:e9:03:ff:1c:c8:3f:30:88:2f:30:76:d3:1f:
         47:9d:79:04:e3:a1:82:21:9b:e3:53:4c:60:94:eb:57:51:e6:
         37:ca:e8:ac:77:dc:0d:73:2c:ad:6d:e6:7c:b7:c4:ec:78:be:
         3a:47:96:49:0b:bb:54:b0:b9:43:0e:e3:b8:79:78:63:4c:8d:
         67:9b:2d:69:9c:b5:bf:16:55:02:af:75:a3:75:f3:a7:10:e3:
         89:3e:89:90:20:7c:9a:d4:98:40:56:1b:46:21:a7:14:ab:3f:
         4d:b8:75:03:24:36:6d:65:50:39:a6:4f:be:00:56:8c:03:7c:
         38:fd:be:71:8f:0f:11:10:3e:8f:aa:82:2e:60:57:02:b6:c6:
         82:e4:98:67:97:98:94:2e:8f:71:20:ab:d3:cc:77:2c:03:0b:
         65:14:1d:8b:21:a4:d3:97:b1:17:e9:00:d8:32:29:cd:ee:59:
         b0:12:fd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org